A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in _bfd_elf_get_symbol_version_string, as demonstrated in nm-new, that can cause a denial of service via a crafted file.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | < 19.* |
| n/a | n/a | < 3.50 |